Talk Open Original ↗
Attestations: a new generation of signatures on PyPI
Type
Conference talk
Client
—
Date
2025
Domain
Supply Chain
Effort
—
Section
—
Presenter
William Woodruff
Related
- 2024 The Next 5 Years of Supply Chain Security on PyPI Talk
- 2024 PEP 740 and PyPI: Bootstrapping Provenance for the Python Ecosystem Talk
- 2024 Imagining a zero-trust future for PyPI Talk
- 2024 Build Provenance: Lessons (so far) from Homebrew Talk
- 2023 What does it look like to code-sign for an entire packaging ecosystem? Talk
- 2023 Securing your Package Ecosystem with Trusted Publishing Talk